Data Deletion Policy rajnigandha.com
1. Purpose
Define the purpose:
To ensure timely and secure deletion of personal data collected from customers, in compliance with data protection regulations, while respecting customer preferences and operational requirements.
2. Scope
Applies to:
- All personal data collected via the e-commerce and loyalty program website/App.
- Customer data, order data, loyalty point history, Date of Birth, Marriage anniversary etc.
3. Types of Data Collected
Classify your data for deletion policies:
-
Personal Identifiable Information (PII): Name, email, phone number, address
-
Transactional Data: Orders, invoices, shipping details
-
Behavioral Data: Site interactions
-
Loyalty Program Data: Points, redemption history
-
Marketing Data: Email/Whatsapp preferences, open rates, campaign data
4. Data Retention Periods
Set clear retention rules based on purpose and legal obligations:
Data Type |
Retention Period |
PII |
5 years after last activity |
Transactional Data |
3 years |
Loyalty Program Data |
3 years from last use |
Marketing Preferences |
Until opt-out or 2 years |
Inactive Accounts |
3 years |
5. User-Initiated Deletion Requests
Users should be able to:
- Request deletion via e-mail id : rewards@rajnigandha.com or call us 0120-4032570 (10 AM-5 PM on all working days )
- Get confirmation within a defined SLA (e.g., 7 working days)
- Understand which data can’t be deleted due to legal requirements
6. Automatic Deletion
Automate deletion or anonymization of:
- Inactive accounts after 24 months
- Loyalty data after expiry
- Marketing consents after unsubscribe
7. Exemptions
Some data cannot be deleted immediately due to:
- Regulatory needs (e.g., financial records)
- Ongoing investigations or disputes
8. Logging & Auditing
- Log all deletion requests and actions taken
- Regular audits to ensure policy compliance
9. Policy Review
Review every 24 months or upon major platform changes or legal updates.